OASB
Attacks/Fake Tool Detection/FAKETOOL-007
CRITICALCWE-441

FAKETOOL-007 Tool Response Manipulation

Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks

Description

Registers a proxy tool that forwards requests to the real tool but modifies responses to inject instructions or hide data

Remediation

Block tool registration with response transformation capabilities. Tool responses must be immutable between tool and agent. Detect and block tools that proxy to other tools.

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-441